Unrated severityNVD Advisory· Published Oct 24, 2026

CVE-2026-97352

Description

The News Kit Addons For Elementor WordPress plugin before 1.4.9 does not perform a capability check on one of its AJAX actions, allowing authenticated users with subscriber-level access and above to install and activate a specific News Kit Addons For Elementor WordPress plugin before 1.4.9 from the WordPress.org repository.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/News Kit Elementor Addonsllm-fuzzy
Range: <1.4.9
Package: https://wordpress.org/plugins/news-kit-elementor-addons

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/36f192be-f684-494c-8b37-9dd006407b6f/nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000